Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138392e31342e3232342e302f32302d3234203d3e203238323833.roa
File:                     3138392e31342e3232342e302f32302d3234203d3e203238323833.roa (raw, json)
Hash identifier:          0dBYyE+vEweifw6i9dM8ZJ14g6Q4EeA1BnmmK4v0iQw=
Subject key identifier:   D6:A0:93:9A:AD:5A:79:F3:95:C6:24:B0:F0:77:73:EF:92:31:D6:B8
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       1551C7EF674E0A626F0B61B5C4A83B36813EF32B
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138392e31342e3232342e302f32302d3234203d3e203238323833.roa
Signing time:             Thu 06 Mar 2025 20:00:01 +0000
ROA not before:           Thu 06 Mar 2025 19:55:01 +0000
ROA not after:            Fri 06 Mar 2026 20:00:01 +0000
asID:                     28283
IP address blocks:        189.14.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:c7:ef:67:4e:0a:62:6f:0b:61:b5:c4:a8:3b:36:81:3e:f3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Mar  6 19:55:01 2025 GMT
            Not After : Mar  6 20:00:01 2026 GMT
        Subject: CN=3082010A0282010100C8742722FAE71B0FE7C60F35E603744DACBC27EAEFE08C428573B875452118602C6890C28771B345F5C890259B6E37D2B7605862735AC348D082FE4B58B51DBF9C57C87590473223A3B3DB792076E4C43A7F0F3C6C6E30AC8C2690177EFEDD29F2E8A401BD833AF466141553343BE72F42B4A3AAABEB6FB2739AC2FD1768086B0BFB090C205BE2D88B6AFE9E68675AB114395A98EE88CDCF11F90172F3E1B0775F60D65D5AD49E73EF9FC9FF391A7EB7F6484C481B360A89671F4D4E4E99CEB23B1BBC70DFB3D27466C0C9E6B366B0104B57F4D415E27D14CAB728A0BE6F0E6E4272C8D00DAF6A6E6B3907DAEA0460331C7818F798D7DAF7C5A9F9E0EE522CA90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:27:22:fa:e7:1b:0f:e7:c6:0f:35:e6:03:
                    74:4d:ac:bc:27:ea:ef:e0:8c:42:85:73:b8:75:45:
                    21:18:60:2c:68:90:c2:87:71:b3:45:f5:c8:90:25:
                    9b:6e:37:d2:b7:60:58:62:73:5a:c3:48:d0:82:fe:
                    4b:58:b5:1d:bf:9c:57:c8:75:90:47:32:23:a3:b3:
                    db:79:20:76:e4:c4:3a:7f:0f:3c:6c:6e:30:ac:8c:
                    26:90:17:7e:fe:dd:29:f2:e8:a4:01:bd:83:3a:f4:
                    66:14:15:53:34:3b:e7:2f:42:b4:a3:aa:ab:eb:6f:
                    b2:73:9a:c2:fd:17:68:08:6b:0b:fb:09:0c:20:5b:
                    e2:d8:8b:6a:fe:9e:68:67:5a:b1:14:39:5a:98:ee:
                    88:cd:cf:11:f9:01:72:f3:e1:b0:77:5f:60:d6:5d:
                    5a:d4:9e:73:ef:9f:c9:ff:39:1a:7e:b7:f6:48:4c:
                    48:1b:36:0a:89:67:1f:4d:4e:4e:99:ce:b2:3b:1b:
                    bc:70:df:b3:d2:74:66:c0:c9:e6:b3:66:b0:10:4b:
                    57:f4:d4:15:e2:7d:14:ca:b7:28:a0:be:6f:0e:6e:
                    42:72:c8:d0:0d:af:6a:6e:6b:39:07:da:ea:04:60:
                    33:1c:78:18:f7:98:d7:da:f7:c5:a9:f9:e0:ee:52:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:93:9A:AD:5A:79:F3:95:C6:24:B0:F0:77:73:EF:92:31:D6:B8
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138392e31342e3232342e302f32302d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:6a:e3:07:f4:ef:25:67:41:94:bd:98:f4:0e:c5:af:90:
         3d:16:f7:95:67:2f:cc:32:14:16:a9:1f:5d:dc:f8:94:e3:5a:
         cb:03:bf:c1:38:88:40:8e:7f:df:4c:0d:17:e2:be:ad:55:32:
         e7:68:4d:0d:2c:ca:de:4b:21:2b:87:84:94:92:99:02:ed:a9:
         43:f3:de:f1:09:01:16:25:9f:bc:df:82:ee:54:1b:7a:25:f7:
         f9:a4:d7:01:e8:f7:01:57:72:7e:59:f2:7e:6a:8b:9e:62:d1:
         22:ce:86:7b:36:32:2c:c7:ab:ab:e9:50:2f:0e:9c:63:71:66:
         5a:98:b0:ea:80:1e:fe:eb:35:c2:0a:0b:1f:22:1d:9e:0c:b7:
         10:86:f1:2c:c0:b8:a3:5e:af:74:18:b4:2c:a0:5c:09:a1:f9:
         ac:84:95:51:dd:f0:97:cb:66:b0:70:e3:f9:50:85:c4:24:50:
         14:0e:7e:e7:9f:e0:a1:5e:28:85:60:da:76:74:35:c4:a5:f6:
         7e:6e:a0:78:dc:88:f8:f8:a0:86:2d:5d:17:b1:6b:ad:aa:52:
         08:78:f9:c2:8d:f9:4b:09:84:d3:f7:a6:6a:d1:c4:85:06:73:
         dc:a7:72:63:74:b9:25:7a:f6:29:8d:2f:86:d6:63:63:13:82:
         4f:d1:b4:65
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUFVHH72dOCmJvC2G1xKg7NoE+8yswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MDI0MEMzRTg4QjMzMEI5QkQwQjkxNzkxRjUxOURC
NUJFOEM1OTAeFw0yNTAzMDYxOTU1MDFaFw0yNjAzMDYyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg3NDI3MjJGQUU3MUIwRkU3
QzYwRjM1RTYwMzc0NERBQ0JDMjdFQUVGRTA4QzQyODU3M0I4NzU0NTIxMTg2MDJD
Njg5MEMyODc3MUIzNDVGNUM4OTAyNTlCNkUzN0QyQjc2MDU4NjI3MzVBQzM0OEQw
ODJGRTRCNThCNTFEQkY5QzU3Qzg3NTkwNDczMjIzQTNCM0RCNzkyMDc2RTRDNDNB
N0YwRjNDNkM2RTMwQUM4QzI2OTAxNzdFRkVERDI5RjJFOEE0MDFCRDgzM0FGNDY2
MTQxNTUzMzQzQkU3MkY0MkI0QTNBQUFCRUI2RkIyNzM5QUMyRkQxNzY4MDg2QjBC
RkIwOTBDMjA1QkUyRDg4QjZBRkU5RTY4Njc1QUIxMTQzOTVBOThFRTg4Q0RDRjEx
RjkwMTcyRjNFMUIwNzc1RjYwRDY1RDVBRDQ5RTczRUY5RkM5RkYzOTFBN0VCN0Y2
NDg0QzQ4MUIzNjBBODk2NzFGNEQ0RTRFOTlDRUIyM0IxQkJDNzBERkIzRDI3NDY2
QzBDOUU2QjM2NkIwMTA0QjU3RjRENDE1RTI3RDE0Q0FCNzI4QTBCRTZGMEU2RTQy
NzJDOEQwMERBRjZBNkU2QjM5MDdEQUVBMDQ2MDMzMUM3ODE4Rjc5OEQ3REFGN0M1
QTlGOUUwRUU1MjJDQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyHQnIvrnGw/nxg815gN0Tay8J+rv4IxChXO4dUUhGGAsaJDCh3Gz
RfXIkCWbbjfSt2BYYnNaw0jQgv5LWLUdv5xXyHWQRzIjo7PbeSB25MQ6fw88bG4w
rIwmkBd+/t0p8uikAb2DOvRmFBVTNDvnL0K0o6qr62+yc5rC/RdoCGsL+wkMIFvi
2Itq/p5oZ1qxFDlamO6Izc8R+QFy8+Gwd19g1l1a1J5z75/J/zkafrf2SExIGzYK
iWcfTU5Omc6yOxu8cN+z0nRmwMnms2awEEtX9NQV4n0UyrcooL5vDm5CcsjQDa9q
bms5B9rqBGAzHHgY95jX2vfFqfng7lIsqQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNagk5qtWnnzlcYksPB3c++SMda4MB8GA1UdIwQYMBaAFKaQJAw+iLMwub0LkXkf
UZ21voxZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNyY2c0cTExRTdXQVFL
cVRyTWVBOFFrYlc5bU5MdTdad3h6dmlDakxuZkZ2LzEvQTY5MDI0MEMzRTg4QjMz
MEI5QkQwQjkxNzkxRjUxOURCNUJFOEM1OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BNjkwMjQwQzNFODhCMzMwQjlCRDBCOTE3OTFGNTE5REI1QkU4
QzU5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zcmNnNHExMUU3V0FRS3FUck1l
QThRa2JXOW1OTHU3Wnd4enZpQ2pMbmZGdi8xLzMxMzgzOTJlMzEzNDJlMzIzMjM0
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMyMzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL0O
4DANBgkqhkiG9w0BAQsFAAOCAQEAj09q4wf07yVnQZS9mPQOxa+QPRb3lWcvzDIU
FqkfXdz4lONaywO/wTiIQI5/30wNF+K+rVUy52hNDSzK3kshK4eElJKZAu2pQ/Pe
8QkBFiWfvN+C7lQbeiX3+aTXAej3AVdyflnyfmqLnmLRIs6GezYyLMerq+lQLw6c
Y3FmWpiw6oAe/us1wgoLHyIdngy3EIbxLMC4o16vdBi0LKBcCaH5rISVUd3wl8tm
sHDj+VCFxCRQFA5+55/goV4ohWDadnQ1xKX2fm6geNyI+Pighi1dF7FrrapSCHj5
wo35SwmE0/ematHEhQZz3KdyY3S5JXr2KY0vhtZjYxOCT9G0ZQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:29 2025 by rpki-client